Issue #3585747 by plopesc: Allow third-party modules to decide whether an order can be repeated.

Pablo Lópezrequested to merge
issue/commerce_repeat_order-3585747:3585747-reorder-access-event into 8.x-2.x

Switch the repeat-order route requirement from 'view own commerce_order' to entity view access so third-party access plugins (e.g. Commerce Group) can reach the controller. Expose the final access decision through a new OrderCloneAccessEvent dispatched by the controller, seeded with the existing "only the order's own customer may repeat it" policy. Subscribers may override the AccessResult via setAccess() to support group-based, impersonation, or support-agent scenarios. Default behaviour is unchanged for sites without subscribers.

Co-Authored-By: Claude Opus 4.7 (1M context) noreply@anthropic.com

Closes #3585747

Merge request reports